Journeyman Penetration Tester (Hybrid, TS-SCI Eligible)

onezerollc; Alexandria (VA); Hybrid; USD 80,000 - 110,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

401(k) with company matching

Paid time off

Holidays

Employee referral program

Educational assistance

Job summary

OneZero Solutions, LLC is seeking a Penetration Tester Journeyman in Alexandria, VA hybrid. Requires Active Top Secret with SCI eligibility clearance. You will conduct adversary simulations, deploy C2 frameworks, and perform internal/external testing across networks, apps, and AD paths.

Strong scripting and malware bypass knowledge is expected. The role involves cloud and on‑prem infrastructure work, and you’ll develop reports with findings and recommendations for DoD cyber defense teams.

Qualifications

• 2 to 3 years of relevant experience.
• Hands on experience with computers and network security.
• Experience conducting phishing campaigns or social engineering.
• Hands on experience with red team tasks and pen testing.
• Familiarity with malware development and EDR/AV bypass strategies.
• Experience with PowerShell, C, C++, or Python.
• Hands on experience utilizing Command and Control (C2) Frameworks such as Cobalt Strike, Sliver, Havoc, etc.

Responsibilities

• Deploy, configure, and operate C2 frameworks such as Cobalt Strike, Havoc, Mythic, and Sliver.
• Monitor, manage, and maintain cloud and on-premise infrastructure used during assessments.
• Internal and external penetration testing.
• Network mapping and enumeration; assess web and mobile applications.
• Perform database scans and assess Active Directory attack paths using BloodHound.

Skills

Red team testing

Penetration testing

Phishing campaigns

PowerShell

C

C++

Python

C2 frameworks

Network security

Education

BA/BS or equivalent

IAT II

IAT level III

GPEN

RTAC (Red Team Apprentice Course)

CompTIA Security+ CE

CompTIA CySA+

CCNA Security

GICSP

GSEC

SSCP

CISSP (or Associate)

CISA

CCNP Security

GCED

GCIH

Tools

Cobalt Strike

Sliver

Havoc

Mythic

Job description

OneZero Solutions, LLC is seeking a Penetration Tester Journeyman in Alexandria, VA hybrid. Requires Active Top Secret with SCI eligibility clearance. You will conduct adversary simulations, deploy C2 frameworks, and perform internal/external testing across networks, apps, and AD paths.

Strong scripting and malware bypass knowledge is expected. The role involves cloud and on‑prem infrastructure work, and you’ll develop reports with findings and recommendations for DoD cyber defense teams.